COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-422

Influence Perception of Commitment and Consistency

An adversary uses social engineering to convince the target to do minor tasks as opposed to larger actions. After complying with a request, individuals are more likely to agree to subsequent requests that are similar in type and required effort.

Soyutlama

Detailed

Tipik ciddiyet

Low

Saldırı ihtimali

High

Saldırıyı anla

Bu saldırı kalıbı nedir?

An adversary uses social engineering to convince the target to do minor tasks as opposed to larger actions. After complying with a request, individuals are more likely to agree to subsequent requests that are similar in type and required effort.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • The adversary must have the means and knowledge of how to communicate with the target in some manner.

Gerekli beceri

  • Low: The adversary requires strong inter-personal and communication skills.

Gerekli kaynak

  • None: No specialized resources are required to execute this type of attack.

Etki

Başarılı saldırı neye yol açar?

Other

Etkilenen alanlar: Confidentiality, Integrity, Availability

Savunma

Nasıl önlenir ve etkisi azaltılır?

1
An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.
2
Individuals should avoid complying with suspicious requests.
CAPEC-422: Influence Perception of Commitment and Consistency — DayBreach Saldırı Sözlüğü · DayBreach